github.com/ratify-project/ratify (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/ratify-project/ratify, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2025-27403: Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and…